Static task
static1
Behavioral task
behavioral1
Sample
97f3d76eca4e0fdf1270588fca9ec7b4e67d9d43916875ea6b929a5f071c944d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
97f3d76eca4e0fdf1270588fca9ec7b4e67d9d43916875ea6b929a5f071c944d.exe
Resource
win10v2004-20231215-en
General
-
Target
6547331ab0eb2e3ace34ac0c869465dc.bin
-
Size
92KB
-
MD5
d12d7fd15d93e044fe1e2cbc967be53d
-
SHA1
2212cfdd3a48b083b4944f4c969c96863bd39309
-
SHA256
004a09bb2e733361a4cb71790db6d21f888208a442e4fa9d66cb43790b5d70a4
-
SHA512
f94f552b5f20baf6068433e0f28d1d342d7e0479d04644ae9cffb28232fd98609b575f8da32913545ca0a1bef6a0984989130b138379bd08dbb742996fca67e4
-
SSDEEP
1536:amsJt2O7WP5AI5BUtQlsj7XgLhUmAPx8udUtI3vInZ5PkD1VQaHKH8YBu8FRxJV9:amUt2OS552tLUh3AiE/07sVvHKj/FdV9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/97f3d76eca4e0fdf1270588fca9ec7b4e67d9d43916875ea6b929a5f071c944d.exe
Files
-
6547331ab0eb2e3ace34ac0c869465dc.bin.zip
Password: infected
-
97f3d76eca4e0fdf1270588fca9ec7b4e67d9d43916875ea6b929a5f071c944d.exe.exe windows:4 windows x86 arch:x86
Password: infected
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ